Software Engineering Manager, Infrastructure Security

Shopify is the leading cloud-based, multi-channel commerce platform. Merchants can use the software to design, set up, and manage their stores across multiple sales channels, including web, mobile, social media, marketplaces, and brick-and-mortar locations. The platform also provides merchants with a powerful back-office and a single view of their business. Shopify was engineered for reliability and scale, making enterprise-level technology available to businesses of all sizes. Shopify powers over 1,000,000 businesses in over 175 countries — and here’s how we’ve been helping more merchants survive, thrive, and navigate the impacts of COVID-19.

Shopify is on a fast-moving mission to make the best products for merchants, buyers, and partners around the globe. Here are just some of the stories from the engineering teams who build and scale Shopify.

Shopify is now permanently remote and we're working towards a future that is digital by default. That location you see above? Consider it merely an example of hundreds of potential locations across North America where Shopify is hiring. Learn more here: https://www.shopify.com/careers/work-anywhere

The Trust & Security Org's mission is to ensure that Shopify becomes and continues to be a globally trusted platform and company. We're looking for a strong, forward-thinking Software Engineering Manager to lead a team of Infrastructure Security Software Engineers guided by empathy for merchants and Shopifolk alike. Software Engineers in the Trust & Security Org carry a huge amount of responsibility for the success of our company, and our opinionated products are the foundational internal technology that make every Shopify employee and project more impactful and more trustworthy. 

Our Technology stack:

• Falco: A cloud native Intrusion Detection System that gives us full visibility into what our workloads are doing.

• Google Cloud: Infrastructure as a Service so we can focus on our apps instead of computer hardware.

• Kubernetes: Shopify runs on Kubernetes. This provides many advantages like security constraints, auto-scaling, fault tolerance, and much more.

• Terraform: Declarative configuration for all of our infrastructure.

Check out what's been keeping the team busy:

• Bringing code signing to the cloud through Binary Authorization and contributing these efforts back to the community

• Our in-house built just-in-time permissions management system clouddo 

• Utilizing Falco for intrusion detection in containers

• Securing Shopify’s PaaS on GKE

• Securing the Software Supply Chain

• COUNTERMEASURE 2017: Infrastructure Security 2.0

• Keyless Entry: Securely Access GCP Services From Kubernetes

What you'll do as a Software Engineering Manager at Shopify:

• Grow the team both through mentoring, acting as a subject matter expert to a team of ICs, and external hiring.

• Help define the long-term vision of infrastructure security at Shopify and rally the team around and towards said vision. Our scale is massive - Shopify powers over 1 million merchants in over 175 countries worldwide.

• Help to roadmap and decompose our vision into granular milestones and projects, aid the team in getting from vision to reality.

• Own team and technical decisions, demonstrate high judgement and help drive team consensus.

• Build, leverage, and own cross-line and organization relationships.

Experience, qualities, and skills that are important for success in this role:

• A curious mind

• Empathetic outlook. No brilliant jerks, as they harm team culture and cohesion, and lead to poor outcomes for the team and company

• Proven team leadership skills. Your management skills and technical depth allows you to develop and mentor others as well as build credibility with your team while executing broader engineering strategies

• A track record of building strong, impactful teams. You have successfully built and grown teams of engineers during your career.

• Strong accountability for and driving the execution of your team

• Proven technical leadership skills using technologies like Kubernetes, Terraform, Go, etc. You feel comfortable diving into the code and interacting with developers at all levels of seniority

• Be committed to creating high quality, low-friction, automated (where possible) solutions to help safeguard and champion for the security of our merchants

Bonus experience:

• Systems security-related interests. You’ve played CTFs/war games or solved similar security puzzles. You know what binary exploitations are, how shell injections work, and how to secure a system. 

• A love of all things Security Operations. Complex systems and software are where your brain thrives. You excel at finding and fixing security concerns and weaknesses in them

• Intimate understanding of logs and their usefulness. You know that the information is there, and you always want to make it more discoverable (e.g. building usable alerting and reporting pipelines).

• Experience with any of the following: Kubernetes, Terraform, Vulnerability and Patch Management, Identity and Access Management, Incident Handling and Response.

• Contributing to the open source community (e.g. kubeaudit, voucher, krane).

We know that looking for a new role can be both exciting and time-consuming, and we truly appreciate your effort. Sam is an actual real live person (👋🏻) and is looking forward to learning more about you through your application. And remember, we want to know what you're really interested in building and why you want to build it at Shopify, so please give us as much detail on this as you'd like in the answers on the next page. 👍 📖

Shopify is now permanently remote, and working towards a future that is digital by default. Learn more about what this can mean for you: https://www.shopify.com/careers/work-anywhere

Our belief is that a strong commitment to diversity & inclusion enables us to truly make commerce better for everyone. We encourage applications from Indigenous peoples, racialized people, people with disabilities, people from gender and sexually diverse communities, and/or people with intersectional identities. Please take a look at our Sustainability Reports to learn more about Shopify’s commitments to our communities, and our planet: https://www.shopify.com/about/environment#SustainabilityReports

At Shopify, we understand that experience comes in many forms. We’re dedicated to adding new perspectives to the team - so if your experience is this close to what we’re looking for, please consider applying.
 

#LI-DNI #LI-REMOTE